$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft File: zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft (raw, json) Hash identifier: Fgyicic8a2IOa/ybreGNVGhP91EQMwZ8/jBUEB4XMcw= Subject key identifier: 3E:C6:28:3B:83:73:8D:00:99:4E:B3:D0:7F:61:89:B5:41:73:55:22 Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Certificate serial: 0104 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft Manifest number: 20C1 Signing time: Tue 07 Jul 2026 10:03:14 +0000 Manifest this update: Tue 07 Jul 2026 10:03:14 +0000 Manifest next update: Thu 06 Aug 2026 10:03:14 +0000 Files and hashes: 1: 15ZNjrMxqF4avRnpoUtSuq8RbBI.roa (hash: 9zpKJqb+oYLZZG4dMt8sObzuDVlZZt6NcTo4z9jcQ1Q=) 2: 2drO1Z2SrgoLMqnncCcYIuySgJc.roa (hash: wiZHUkoUQcHGufxCfVqmxOKcby3563m71geiIH6b9CE=) 3: 8gKizuTlBC5aI6gtWXXUBVG8jPo.roa (hash: onXv+XbjW5XekEIZEQNt4hPXLBsBHa9IX9VIUtgWOx0=) 4: 8r9aPdxqevAQOQALCdOQEOufdd4.roa (hash: pwwu1/zKhgeiBbYPvqSMy01hqyD9L9zxhczQzDGhzYg=) 5: BuSW3lJNbwXMO8JofHHJNeG67Fc.roa (hash: czDMH6zXuJrRleoZGsrKRIiQzz4wvI/V+I83E9Z+yEA=) 6: IbJTF01oFKcrKDNjwXcyzhsHubY.roa (hash: na4PvuIaTHpJ5Pz3d1z0ZqJeMafNlo7LNksgK8eFQH8=) 7: PhmfQevVT8fJOneBUPbPW2RhrVc.roa (hash: XPIio0c1h9ossQ5YEOT4vjq0lRi8/O0DPW1ysk91Y6c=) 8: R6TF_jDMlQzSRIBXJNBf6ZWfPN4.roa (hash: 9n8lGrGOUcy4l01HLWb+xbUwvD9U5jbI/xviSqm5STs=) 9: RNbsb0qpu3SF3fs1XWjXAOEgPTs.roa (hash: tAL3bs2X+81SsJUKgKIHiu4qULoV70ZxQ1vvh2qMlho=) 10: SdB7JnvXjQrmw3jZJLDe4G3fq5w.roa (hash: 75BSh6+Cdov5JlV0eutT83syyf7GxpfxR0Pp3xCnR6Y=) 11: aEhG3cgrnFMzy2p1hiLStvbN6F8.roa (hash: dS4WJipaVruo9DFNdidgN8R9JbM80gtRiPQpOuy468U=) 12: b59fNcieMFQyMckohlK2zOadA_k.roa (hash: 29uTaxGLLxXpWbzs8w/k9Slb+iXgQHAKpCC0FW+s1Kk=) 13: e-XeVgp-oGkKvtTzfYFrgbBLFkM.roa (hash: V/eyD/EY5hAIX90SeRs0wZMUr24IKB71E54R1bWLF8s=) 14: yucz_63nIbTORoDSKpA7MK8UCSI.roa (hash: yF/8kRyUjoQfu7kyz59UwO2bjkYDLZfLDuHwh7pDmtU=) 15: zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl (hash: N1nOXd4bJPRCi/V3l9jrng3+DDE4Pc1q840jxmyOKKI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 09:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Validity Not Before: Jun 15 01:36:58 2026 GMT Not After : Jun 15 01:30:02 2027 GMT Subject: CN=3EC6283B83738D00994EB3D07F6189B541735522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:25:50:92:66:6d:f6:f4:a6:de:a1:f7:77:d0: 33:45:20:47:cb:32:20:be:90:1a:41:34:f4:d0:28: a8:44:73:5b:3f:ee:35:dc:ad:b8:6b:39:91:d0:a4: 77:4b:a0:ee:0c:36:e3:89:94:9d:e8:7a:f3:51:cf: 2d:26:3c:04:43:b7:27:e1:58:75:d4:7d:7f:be:38: 80:53:ce:aa:aa:1a:bf:13:4b:f1:d7:61:65:56:82: 34:25:b6:75:80:e3:bf:c4:69:da:d7:3f:d8:24:9d: 32:cc:cf:95:8a:5d:03:ff:13:6b:2e:8c:d2:6c:0c: 83:a7:b9:88:3a:31:3f:b5:4c:0e:2a:87:38:54:a0: 26:a2:97:3c:b0:37:5d:8b:70:5c:32:3a:cf:f5:67: 21:a5:92:da:0c:a2:50:58:ca:cd:4d:13:6c:56:e6: 86:2e:03:77:8e:5e:4d:e7:bf:50:59:34:57:eb:97: f7:1d:a2:e0:ee:64:16:09:e0:cf:4a:31:45:57:73: 62:d4:a6:c3:d9:f2:d9:1c:94:67:04:42:47:a9:71: 51:16:fd:93:f9:15:c4:8d:21:19:bc:f5:a6:8f:8d: 15:d9:19:92:43:a1:74:b5:ac:8f:70:3e:40:70:0b: d9:65:14:27:ca:15:71:a3:01:8d:3b:e3:a4:47:c4: e4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C6:28:3B:83:73:8D:00:99:4E:B3:D0:7F:61:89:B5:41:73:55:22 X509v3 Authority Key Identifier: keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:6b:3d:7b:4b:3e:dc:29:ff:2a:8f:c6:03:6b:48:65:27:a6: 68:ab:b8:2c:43:fe:51:b8:fd:de:8d:c8:d2:7f:1b:75:69:ff: 14:e6:88:28:7b:b3:f6:50:c1:c7:fd:5a:ac:52:f1:71:4d:a5: 3d:2d:5c:7e:0a:87:f1:59:8b:19:90:7f:c0:28:d5:b3:af:ef: d8:49:0a:33:c4:8c:61:5e:cf:d1:a6:d4:0c:40:40:d1:2a:87: 4b:fa:c2:92:2f:f2:58:66:de:e8:69:bf:75:8b:95:2e:49:2f: 9a:44:5b:eb:25:dc:e8:18:ef:26:4a:36:cc:d5:74:ca:67:c0: 97:d5:c0:15:55:47:f8:db:22:69:36:ec:14:c1:fa:e0:db:12: d7:ba:70:2a:d5:9e:46:51:4f:19:f4:57:f9:8f:f6:91:9b:b3: 40:7f:a8:1f:a6:e2:ac:f0:3c:bc:af:7e:9d:73:6b:b9:f8:17: 1d:bf:06:59:53:18:ec:cf:03:74:5c:7f:61:0c:7d:e4:5d:d0: 40:af:51:44:bf:5a:56:3e:f4:2d:f0:46:cb:8b:34:bd:76:41: 81:e8:7b:79:86:d8:e7:4d:97:26:78:22:57:fa:65:6c:95:71: 81:9b:41:14:52:92:f5:70:81:b2:70:68:35:ae:b6:8e:a4:b3: d2:d1:82:1f -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNjA2MTUw MTM2NThaFw0yNzA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNFQzYyODNCODM3MzhE MDA5OTRFQjNEMDdGNjE4OUI1NDE3MzU1MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSJVCSZm329Kbeofd30DNFIEfLMiC+kBpBNPTQKKhEc1s/7jXc rbhrOZHQpHdLoO4MNuOJlJ3oevNRzy0mPARDtyfhWHXUfX++OIBTzqqqGr8TS/HX YWVWgjQltnWA47/EadrXP9gknTLMz5WKXQP/E2sujNJsDIOnuYg6MT+1TA4qhzhU oCailzywN12LcFwyOs/1ZyGlktoMolBYys1NE2xW5oYuA3eOXk3nv1BZNFfrl/cd ouDuZBYJ4M9KMUVXc2LUpsPZ8tkclGcEQkepcVEW/ZP5FcSNIRm89aaPjRXZGZJD oXS1rI9wPkBwC9llFCfKFXGjAY0746RHxOQ/AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUPsYoO4NzjQCZTrPQf2GJtUFzVSIwHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTczL3pURWtKX2dBdUNsdG9SVkF5TGh1WE9FdnhzVS5tZnQwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCoaz17Sz7cKf8qj8YDa0hlJ6Zoq7gs Q/5RuP3ejcjSfxt1af8U5ogoe7P2UMHH/VqsUvFxTaU9LVx+CofxWYsZkH/AKNWz r+/YSQozxIxhXs/RptQMQEDRKodL+sKSL/JYZt7oab91i5UuSS+aRFvrJdzoGO8m SjbM1XTKZ8CX1cAVVUf42yJpNuwUwfrg2xLXunAq1Z5GUU8Z9Ff5j/aRm7NAf6gf puKs8Dy8r36dc2u5+BcdvwZZUxjszwN0XH9hDH3kXdBAr1FEv1pWPvQt8EbLizS9 dkGB6Ht5htjnTZcmeCJX+mVslXGBm0EUUpL1cIGycGg1rraOpLPS0YIf -----END CERTIFICATE-----Generated at Tue Jul 7 12:55:10 2026 by rpki-client